NyxErinys/Nix-Config
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

add remote encryption unlock

Browse source
This commit is contained in:
nyxerinys 2026-10-01 19:37:53 -05:00
parent c21a0fc691
commit e326c34f82
1 changed files with 14 additions and 0 deletions
Download patch file Download diff file Expand all files Collapse all files

14
hosts/apollo/boot.nix
View file

@ -27,6 +27,20 @@
wants = [ "keys.mount" ]; wants = [ "keys.mount" ];
after = [ "keys.mount" ]; after = [ "keys.mount" ];
}; };
network = {
enable = true;
ssh = {
enable = true;
port = 2222;
hostKeys = [ "/etc/secrets/initrd/ssh_host_ed25519_key" ];
# Use an inline string to prepend the forced systemd command to your key
authorizedKeys = [
''command="${pkgs.systemd}/bin/systemd-tty-ask-password-agent --watch" ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIIjed9TzAaS6afEilS6CQAyz7DRJUNeLWGeboB3Ma3Rb remote-fido-unlock''
];
};
};
}; };
systemd.services."zfs-import-nix-main" = { systemd.services."zfs-import-nix-main" = {